CVE-2024-1487

Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting

Medium · published March 11, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
32.9
In the wild
Unconfirmed
What it is

The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.9th percentile
Published
2024-03-11T17:56Z
EPSS history
Timeline
  • 11 MAR 17:56Z
    Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting
    cvelistv5